ISMS & GRC Analyst — Security Compliance & Risk

Clue Software; West of England; On-site; GBP 65,000 - 90,000; Full time

Job summary

Clue Software is seeking a Security Governance, Risk and Compliance Analyst in its Bristol office. You will administer our ISO 27001 ISMS, maintain the risk register, lead customer security assurance and coordinate evidence for audits and incidents.

You will work across Legal, IT Ops, Product and Sales to track commitments, manage third‑party risk, guide incident responses and ensure compliance with CCS, G‑Cloud 15 and the NCSC framework.

Qualifications

• Experience maintaining an ISO 27001 ISMS and evidence library.
• Ability to manage risk register and audit readiness.
• Experience coordinating customer security questionnaires and due diligence.

Responsibilities

• Administer IS policy, review schedules, and publish records with CISO approval.
• Maintain ISO 27001:2022, SoA, evidence, and internal/external audits.
• Lead customer security assurance and respond to due diligence requests.
• Coordinate risk, incidents, and threat responses with stakeholders.
• Track third-party supplier risk and governance activities.
• Prepare governance reports and board-level updates.

Skills

ISO 27001 ISMS

Risk management

Audit coordination

Incident response

Customer security assurance

Third-party risk management

Security governance

Stakeholder coordination

Education

ISO 27001 Lead Implementer or Lead Auditor (desirable)

CISM/CRISC/CISMP (desirable)

Tools

TPRM platform

Job description

Clue Software is seeking a Security Governance, Risk and Compliance Analyst in its Bristol office. You will administer our ISO 27001 ISMS, maintain the risk register, lead customer security assurance and coordinate evidence for audits and incidents.

You will work across Legal, IT Ops, Product and Sales to track commitments, manage third‑party risk, guide incident responses and ensure compliance with CCS, G‑Cloud 15 and the NCSC framework.